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PATENT CLAIMS 

1 . System for data processing a security critical activity in a secure management 
mode in a computer, which computer comprises a processor (10), handling devices 
(20, 28-38), memory storage means (14, 42). hereafter named resources; 
5 that the system comprises a security device (50) comprising a processor (52) and 

signal generators (SGp M , SG A ), a number of control means, hereafter named switches 
(60), with signal receivers (SR A , SRpm) arranged respectively between the security 
device and the pre-selected resources, 

that the switches contain information regarding accessibility to and from the 
10 resources, or parts of the resources, hereafter named resource ranges, 

wherein the switch controls requests from the computer processor to the resources or 
resource ranges depending on the information contained in the switch, 
and wherein, in response to a call from the computer processor or the handling 
devices, the switches are activated by receiving a signal (SG PM ) from the security 
15 device, enabling the security device access to and from the resources or resource 

ranges selected by the security device, and denying the computer processor access to 
and from the resources or resource ranges selected by the security device. 

2. system according to claim 1, characterised in that the signal (SG PM ) can be 
20 generated only by the security device, 

3. System according to claim ^characterised in that the information 
contained in the switches controls access to resources for requests from other 
possible processors contained in or connected to the computer. 

25 

4. System according to claim 1, characterised in that the security device 
comprises a signal generator (SG A ), wherein, when a switch receives a signal (SG A ), 
together with new information (addresses, operation, data), the security device is able 
of altering the content of the information of that switch. 

30 

5. System according to claim 1, characterised in that the switches comprise a 
signal receiver (SRs) by which it can detect which source is handling the computer, 
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and that the switch compares this with the resource which requests access to a 
resource or resource range controlled by the switch, and depending on the 
information in the switch, enables or denies access to that resource. 

5 6. System according to claim ^characterised in that the information in the 
switch enables the switch to control certain areas of the memory means are allocated 
to be accessed by the processor of the security device only. 

7. System according to claim ^characterised in that the information in the 
10 switch enables the switch to control that certain resources are accessible by the 

computer processor when not in secure management mode, and only accessible by 
the security device when in secure management mode. 

8. System according to claim ^characterised in that the switches are 
15 hardware switches. 
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